Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa
File: 29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa (raw, json)
Hash identifier: fomxuGnelmTJkpKRTTGHqxKIz3i6aIPYGZ/fvxw+SWA=
Subject key identifier: F5:9F:3B:15:8A:1D:4C:CD:A0:01:C2:EA:AF:C4:4B:31:8D:9C:63:22
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584823955584984A0FF4B8AB2740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 701
IP address blocks: 209.116.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:55:84:98:4a:0f:f4:b8:ab:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=ac9bcd17-b4c8-4551-8057-88da2ef75f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:75:65:c8:78:97:83:2d:24:2c:95:67:7e:
48:6c:9c:ea:3d:8c:9c:cc:df:d9:23:17:d9:69:0d:
fb:f6:e5:e4:67:4a:06:4d:44:23:b9:cc:46:b3:8f:
f4:e8:97:a4:e4:f6:be:f6:f9:77:6a:42:fd:0a:3a:
63:77:cd:bf:23:94:d9:e3:fb:a6:1b:87:70:4c:35:
df:db:39:19:b1:de:6a:78:57:f2:29:77:45:a7:1d:
03:89:31:0e:2f:ec:49:29:16:51:a4:76:48:02:1b:
bc:02:40:9e:0a:37:76:00:0a:35:d2:b1:55:2f:82:
8e:da:b0:27:7f:b0:60:3f:1e:ed:1e:a3:d1:9c:71:
6e:b5:6b:62:9c:54:07:c5:3e:c9:f0:dc:79:ac:70:
25:67:99:10:ba:29:40:79:92:e1:b2:0e:75:9e:8f:
91:13:18:95:2e:9f:05:b9:49:ee:7e:85:d9:0e:38:
30:70:b7:d4:dd:ca:5c:76:e8:e5:e5:6c:ff:14:a5:
40:5a:46:85:70:a1:42:d8:40:e7:0c:6b:58:e1:94:
e7:4f:43:c4:8f:74:b5:0c:38:e7:d9:5d:32:e4:63:
0f:55:fb:48:e5:36:af:4a:40:59:7f:4a:1c:de:82:
cc:8c:02:8e:34:c0:51:23:1d:07:4d:2b:6a:b7:13:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9F:3B:15:8A:1D:4C:CD:A0:01:C2:EA:AF:C4:4B:31:8D:9C:63:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
209.116.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ba:e5:00:91:b5:54:ce:1f:eb:c6:70:85:13:a0:0d:f6:b2:
51:f4:6c:69:b0:80:2d:6c:b7:4b:46:7e:7c:2b:37:fb:d6:d9:
04:e4:2c:b2:e3:45:a7:25:3e:29:2c:c5:25:5b:fa:c7:6c:2d:
52:18:6e:e2:25:00:22:fe:34:d0:23:68:1c:1e:42:98:8a:ee:
d8:a2:d4:3a:8d:c3:e2:f4:20:16:c7:e8:fa:5f:5a:00:6a:17:
78:b5:fa:e6:1f:c2:98:9f:75:ae:06:cd:e1:a4:5f:99:de:ff:
6b:48:c0:e3:da:c1:e1:d4:f0:a0:8c:c3:87:67:d0:bf:4b:99:
18:79:35:ea:20:37:b0:82:d7:46:68:9a:bf:90:de:fd:11:cf:
de:42:4b:e6:18:42:de:2b:aa:b5:ad:4f:c9:6b:52:9e:cb:1a:
06:6c:ef:2a:4f:3d:7b:28:8b:c1:13:39:a3:69:df:25:c6:bd:
00:b5:d1:a6:36:fb:99:73:0d:af:36:eb:3f:61:b1:0f:46:06:
15:52:58:50:e5:3c:64:d3:23:44:d2:10:2b:5d:a3:7a:d4:1b:
dc:da:60:26:c7:e7:77:42:98:2d:db:17:80:c9:35:8d:7c:e8:
4d:b0:f9:e6:47:20:ce:16:97:1b:54:87:72:3a:57:f1:2c:83:
ae:4b:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:43:07 2025 by rpki-client